Network Security Management

Summary. Protect users and sites with clean internet access policies, SD‑WAN/SASE posture, and segmentation guidance. We manage change and keep policies healthy.

Who it's for. SMEs with one or more sites/branches who want sensible controls without slowing people down; hybrid workers included.

Business Outcomes

Safer internet access with DNS/SWG and sensible categories
Branch posture aligned (SD‑WAN/SASE) with change governance
Segmentation approach documented; ZTNA for critical apps

What’s Included

Scope	Description
Core Inclusions	Internet filtering posture (SWG/DNS) management and review Change management for firewall/SD‑WAN/SASE policies High-level segmentation guidance and exceptions handling
Optional Add‑Ons	After-hours change windows (per Annex) Device care for firewalls ($140/device) and server proxies ($125/server) ZTNA rollout pilots for critical apps Change Control & CAB (Managed)

Onboarding & Steady‑State

Note: timelines depend on size and current tooling.

Phase	Activities	Deliverables	Indicative Duration
01 — Baseline	Assessment; site inventory Policy import & review	Change plan Initial SWG/DNS/Firewall policy set First posture snapshot	0.5–1 week
02 — Stabilise	Change schedule agreed Exceptions log created	Stable posture with governance Exceptions register (owner + expiry)	1–2 weeks
03 — Operate	Monthly reporting Planned changes	Monthly KPIs (changes, exceptions, incidents) + decisions/next actions	Ongoing

Service Levels (Summary)

Plan	Coverage	Response / Restore	Governance
Bronze	Business hours (Mon–Fri 08:00–17:00 NZT, except Public Holidays)	P1: 2h / NBD • P2: 4h / 2BD	Monthly summary
Silver	Extended hours (Mon–Fri 07:00–19:00 NZT, except Public Holidays)	P1: 1h / Same day • P2: 2h / NBD	Weekly check‑in • Exceptions log
Gold	Business + after‑hours (24×7 P1 only)	P1: 30m / ASAP • P2: 1h / Same day	Exec summary • CAB-ready notes

For pricing, terms and conditions see the Pricing Annex.

Success Criteria (from our perspective)

Safer internet access established: core categories enforced (malware/phishing/newly-registered) with no critical business disruption
Change governance in place: approved change windows, exception register with owners and expiries
Measured improvement: reduction in policy bypasses and high-risk categories; MTTR within SLA for P1/P2
Telemetry visible: monthly posture report (policy changes, exceptions ageing, DNS/SWG highlights) accepted

Prerequisites

Admin or delegated access for setup and policy verification
Tooling in place (or agreeable to deploy)
Maintenance windows agreed

Assumptions

Corporate-managed assets in scope unless otherwise agreed
Low-risk, scheduled maintenance with rollback plans
Customer approves standard change practices (CAB for Gold)

Risks & Mitigations

Out of Scope

Major tooling migrations (separate project or pilot)
Custom scripting beyond standard patterns without a change request
Licensing costs for third-party tools (pass-through)

Get started

Book an Assessment Request Managed Service Request Custom Package Talk to us

Prefer to stabilise first? Run a short pilot to establish a clean baseline; then roll into this managed service.

Business Outcomes

What’s Included

Onboarding & Steady‑State

Service Levels (Summary)

Success Criteria (from our perspective)

Prerequisites

Assumptions

Risks & Mitigations

Out of Scope

Get started

Related Resources